this post was submitted on 01 Jan 2024
-65 points (21.7% liked)
Technology
59198 readers
2866 users here now
This is a most excellent place for technology news and articles.
Our Rules
- Follow the lemmy.world rules.
- Only tech related content.
- Be excellent to each another!
- Mod approved content bots can post up to 10 articles per day.
- Threads asking for personal tech support may be deleted.
- Politics threads may be removed.
- No memes allowed as posts, OK to post as comments.
- Only approved bots from the list below, to ask if your bot can be added please contact us.
- Check for duplicates before posting, duplicates may be removed
Approved Bots
founded 1 year ago
MODERATORS
you are viewing a single comment's thread
view the rest of the comments
view the rest of the comments
Unless they intercept the handshake as a proxy and have access to everything after that. The average Starbucks employee is not doing this.
An Israeli spy tracking down an arms dealer might figure out how to do this at a hotel the target was using, but the arms dealer would know that.
Edit: I think some vps would notice this happening, fwiw.
You’re thinking of a MitM proxy, and generally speaking what you described is not a risk when using public wifi.
There are two ways you can set up a MitM proxy:
The first option will result in prominent warnings in all modern browsers. If the sites in question implemented HSTS and the user has visited them before, the browser will outright refuse to load them.
The second option will result in even more prominent warnings that you have to go out of your way to bypass in all browsers. The only way it wouldn’t would be if one or more of the following is true:
Hence "won't happen at Starbucks, might if Mossad is after you". Thanks for adding the details. I feel like most people think vpns are magic but also radically overestimate their personal risk.